This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d9b3cf48-ebf6-3a34-ba36-70b7e8c62812.roa
File:                     d9b3cf48-ebf6-3a34-ba36-70b7e8c62812.roa (raw, json)
Hash identifier:          8WkrnHYWl48BI9RLLicAY/jmdSX1ZSMmFUgnKL4tSOw=
Subject key identifier:   37:56:00:46:04:6C:EB:C1:A6:42:43:E0:B8:21:78:4A:5E:D1:3F:BB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584C6191B4EAA290B9F9CC55A4A0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d9b3cf48-ebf6-3a34-ba36-70b7e8c62812.roa
Signing time:             Thu 01 Jan 2026 14:00:38 +0000
ROA not before:           Thu 01 Jan 2026 14:00:38 +0000
ROA not after:            Wed 01 Apr 2026 13:00:38 +0000
asID:                     20115
IP address blocks:        66.168.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:61:91:b4:ea:a2:90:b9:f9:cc:55:a4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan  1 14:00:38 2026 GMT
            Not After : Apr  1 13:00:38 2026 GMT
        Subject: CN=b87bf7fe-a502-474d-8f6c-b9c47eff6200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:03:74:1a:33:e3:eb:53:d2:fa:02:8f:bb:
                    a7:6a:3c:97:46:c8:10:99:a3:1d:66:51:4b:77:94:
                    f2:b2:d0:e2:13:f1:c8:d0:2d:b7:ee:b6:11:13:5c:
                    0c:af:56:11:d4:59:2b:39:92:d8:35:6d:86:39:91:
                    a2:7f:12:44:4d:8d:29:b0:d0:60:ac:47:af:75:d7:
                    e1:95:2d:f5:de:9f:b2:77:dc:51:0d:e7:bc:b1:58:
                    68:da:e4:d4:e9:11:03:ac:ed:c5:6f:a6:2a:e2:49:
                    d8:71:b7:81:0d:32:0d:58:a1:b8:e9:2e:80:21:61:
                    3c:a3:88:dd:71:d1:3e:29:fa:6c:5f:a5:ae:65:b5:
                    eb:66:a1:20:f5:f0:86:53:6f:d8:fa:c0:9f:35:33:
                    68:90:e2:c1:f1:50:6b:a5:96:e7:38:ec:c9:48:9e:
                    34:72:6c:0b:b8:89:7a:e2:cd:7f:4c:f9:a7:7e:28:
                    cd:43:54:cb:0d:d4:8e:19:ce:e8:17:c5:27:fb:5d:
                    7f:56:a1:a1:95:fe:fa:34:6e:3a:da:eb:bb:c1:33:
                    1d:86:d8:b6:c2:a7:75:f0:f5:44:59:ab:b7:04:9c:
                    c5:8f:24:cc:fe:80:58:76:0e:60:6b:e4:fa:da:ba:
                    e2:0b:73:55:af:5c:d0:5d:17:fa:df:47:98:2d:63:
                    55:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:56:00:46:04:6C:EB:C1:A6:42:43:E0:B8:21:78:4A:5E:D1:3F:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d9b3cf48-ebf6-3a34-ba36-70b7e8c62812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.168.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:99:68:ba:59:9a:c7:49:2d:a3:cb:e4:70:77:6b:1b:ef:6a:
         9b:60:3e:f7:60:37:15:95:06:46:23:98:e4:e9:ef:9d:20:2e:
         97:cc:7c:4e:85:8f:ac:fc:85:c8:f9:fb:ae:d9:33:ea:c7:48:
         ca:16:3f:af:96:e5:76:8a:f4:28:b6:dd:b1:7f:f8:ad:70:8d:
         b2:e9:47:f2:7c:69:3b:d1:f7:17:bd:c2:07:37:fd:10:aa:7a:
         ea:f5:8e:c6:2b:82:45:8d:ab:21:0b:86:7d:07:a6:88:67:22:
         86:72:36:51:8f:6a:74:fc:23:61:3f:29:c0:5e:2e:0e:86:f0:
         7d:20:95:46:19:c6:08:51:04:1c:a7:12:4b:6a:be:00:e7:05:
         41:c8:1c:5d:6a:98:c1:35:ba:e6:31:09:81:a9:a5:fc:f8:49:
         7c:20:a5:14:13:2f:d6:6c:ba:80:c6:4a:43:aa:17:0b:bf:99:
         c4:74:0c:e5:fa:01:ad:bb:ab:e2:cb:f2:87:ef:ab:72:81:9f:
         6d:79:60:b4:bf:e8:54:12:8b:22:9a:60:3c:6c:95:c7:6c:32:
         87:4d:18:40:a3:4b:16:60:5f:ba:ea:ac:f5:2f:2b:ec:5e:ba:
         08:42:5a:b5:7f:7c:fd:93:ef:e8:f3:22:64:d9:45:e7:93:c2:
         d8:9d:ab:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 12:29:39 2026 by rpki-client